$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/fb9df9b5-d079-4021-ba4d-b1bb1d31050a.roa File: fb9df9b5-d079-4021-ba4d-b1bb1d31050a.roa (raw, json) Hash identifier: 0VcC7MdqnxwGjvT5p0DBdd614dlIu2KzwitHCrEpm2g= Subject key identifier: D1:DD:4B:2C:4F:2F:97:AF:EF:53:5E:08:45:9E:95:F1:4C:E2:26:6A Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 4BE056252E9C0440892E9214A83BC42842843EBA Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/fb9df9b5-d079-4021-ba4d-b1bb1d31050a.roa Signing time: Mon 30 Jun 2025 17:50:05 +0000 ROA not before: Mon 30 Jun 2025 17:50:05 +0000 ROA not after: Mon 04 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 35.96.0.0/12 maxlen: 12 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:e0:56:25:2e:9c:04:40:89:2e:92:14:a8:3b:c4:28:42:84:3e:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Jun 30 17:50:05 2025 GMT Not After : Aug 4 23:59:59 2025 GMT Subject: serialNumber=81e5ae8346beee87b0d52801abe6147a8735c5c71e7f07e3fe137d709a1f589e, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:79:a2:28:d3:34:7f:b9:0c:d0:2d:8e:e8:a9: fd:54:3d:c2:1d:79:dc:86:20:26:ce:c7:5c:17:64: fa:3b:6e:0c:70:6d:da:bb:3e:e2:6c:51:21:a4:9e: 08:f1:3a:cc:67:3e:ab:c9:46:0e:ad:b6:36:13:77: bf:96:00:2d:3e:38:d7:75:15:cf:3d:13:92:8e:81: 0e:d3:e2:d1:b0:4f:80:92:b4:b3:71:a4:6d:04:7d: bc:cd:7d:f9:f1:5e:ea:e9:e0:a0:5a:05:f8:a4:7a: 9c:c8:39:95:9c:22:e1:a4:76:a1:a0:13:71:56:bf: 11:c7:35:5f:20:56:d2:09:d6:41:fc:fc:72:9c:66: 5d:ce:8d:7c:61:ab:e5:d2:d0:1e:79:41:d2:5e:cf: 08:d5:d7:32:f3:80:3e:6f:a6:d7:01:19:65:e0:72: 78:65:41:db:bc:d2:ca:91:e7:ae:9a:10:0a:fb:d7: b7:c1:a2:84:df:81:44:f5:ae:c8:e6:de:ad:25:3b: db:89:6b:56:23:a9:c8:0c:32:26:a5:49:c9:5a:29: 25:73:2b:6c:18:4d:7c:c1:42:87:df:bf:b8:d9:46: d4:ab:2c:c7:15:89:22:68:99:d2:2f:6b:63:c8:be: 8f:b4:7d:b0:46:96:dc:c1:31:5a:df:a0:10:18:e7: 16:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:DD:4B:2C:4F:2F:97:AF:EF:53:5E:08:45:9E:95:F1:4C:E2:26:6A X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/fb9df9b5-d079-4021-ba4d-b1bb1d31050a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.0.0/12 Signature Algorithm: sha256WithRSAEncryption 00:b2:77:0c:de:2b:5c:2b:8c:ee:5e:89:cc:38:0a:53:81:21: d3:70:46:06:aa:32:b0:12:73:5e:f2:61:e5:58:3d:75:c6:62: 62:4c:5a:2f:af:9a:e2:3d:e0:e6:d3:9c:47:d1:99:af:57:30: f5:fe:83:ec:f7:e3:fb:42:b1:6f:9e:4e:7a:c0:8f:45:3d:4e: 1a:0b:fb:b9:af:d9:41:87:1a:5d:e9:cb:da:8d:76:b4:6d:cc: 30:b8:58:ea:42:9b:26:48:8e:54:ae:3c:57:90:2e:63:be:bf: 4e:28:16:58:7d:bb:ce:5c:0d:f9:49:56:3c:c4:45:9a:ed:09: 67:b8:44:43:54:4d:af:4a:96:ec:96:ef:4b:1e:11:3b:d5:f5: 15:07:14:e7:54:87:40:1c:3b:68:11:89:92:85:7d:70:6f:11: a8:fb:73:6d:aa:62:fe:64:bd:1a:4d:9a:6e:93:a0:c8:27:51: e4:d5:7f:83:53:23:5f:f7:15:40:b4:35:3b:62:9e:34:3f:b2: e3:c0:b8:30:16:e7:ab:5f:fc:68:ea:27:4c:e6:5f:fd:7d:82: 9b:21:39:e8:8c:66:5c:a5:b2:e4:37:f7:48:cf:6a:90:b1:8c: 44:8a:5f:d3:48:67:84:07:57:b7:ed:7a:34:65:be:07:35:dd: 3f:a2:08:04 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUS+BWJS6cBECJLpIUqDvEKEKEProwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUwNjMwMTc1MDA1WhcNMjUwODA0MjM1OTU5 WjB6MUkwRwYDVQQFE0A4MWU1YWU4MzQ2YmVlZTg3YjBkNTI4MDFhYmU2MTQ3YTg3 MzVjNWM3MWU3ZjA3ZTNmZTEzN2Q3MDlhMWY1ODllMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDpeaIo0zR/uQzQLY7oqf1UPcIdedyGICbOx1wXZPo7bgxw bdq7PuJsUSGkngjxOsxnPqvJRg6ttjYTd7+WAC0+ONd1Fc89E5KOgQ7T4tGwT4CS tLNxpG0EfbzNffnxXurp4KBaBfikepzIOZWcIuGkdqGgE3FWvxHHNV8gVtIJ1kH8 /HKcZl3OjXxhq+XS0B55QdJezwjV1zLzgD5vptcBGWXgcnhlQdu80sqR566aEAr7 17fBooTfgUT1rsjm3q0lO9uJa1YjqcgMMialSclaKSVzK2wYTXzBQoffv7jZRtSr LMcViSJomdIva2PIvo+0fbBGltzBMVrfoBAY5xbdAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQU0d1LLE8vl6/vU14IRZ6V8UziJmowHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyL2ZiOWRmOWI1LWQwNzktNDAyMS1iYTRkLWIxYmIxZDMxMDUwYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwQjYDANBgkqhkiG9w0BAQsFAAOCAQEAALJ3DN4rXCuM7l6JzDgKU4Eh03BG BqoysBJzXvJh5Vg9dcZiYkxaL6+a4j3g5tOcR9GZr1cw9f6D7Pfj+0Kxb55OesCP RT1OGgv7ua/ZQYcaXenL2o12tG3MMLhY6kKbJkiOVK48V5AuY76/TigWWH27zlwN +UlWPMRFmu0JZ7hEQ1RNr0qW7JbvSx4RO9X1FQcU51SHQBw7aBGJkoV9cG8RqPtz bapi/mS9Gk2abpOgyCdR5NV/g1MjX/cVQLQ1O2KeND+y48C4MBbnq1/8aOonTOZf /X2CmyE56IxmXKWy5Df3SM9qkLGMRIpf00hnhAdXt+16NGW+BzXdP6IIBA== -----END CERTIFICATE-----Generated at Tue Jul 1 01:21:38 2025 by rpki-client